$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0320cbe9-d834-3034-9895-9940d4d9f0db.roa File: 0320cbe9-d834-3034-9895-9940d4d9f0db.roa (raw, json) Hash identifier: FbNxpFzj5lDwCQPSJFeOia3j3ZUMImEpkGA0uqaB4v4= Subject key identifier: 6D:DE:5E:B6:94:9B:D3:AD:42:BF:72:EA:C3:A3:81:6F:2A:34:71:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21E46EACFBBEE28753800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0320cbe9-d834-3034-9895-9940d4d9f0db.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 396570 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1e:46:ea:cf:bb:ee:28:75:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=3445e125-66dc-485b-9827-90d92f01c96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:39:df:6b:c4:7b:d1:8f:e8:ee:d7:0d:37: 14:cb:3f:b6:6c:6c:d5:21:ca:ba:fc:5a:a4:d4:7b: 92:88:54:05:ea:dc:86:5b:ca:73:d0:54:d9:a6:a6: 46:3e:e5:fa:c4:52:15:1f:ba:a0:05:1e:c5:64:2e: e9:9b:83:0f:d7:5e:e1:e1:55:32:d7:b4:c5:21:63: 07:a1:d3:08:52:9f:71:84:0d:de:f7:9f:dd:a4:97: c5:92:7c:98:7c:e7:04:91:bc:89:8e:08:3c:4b:7c: 23:a5:82:5d:2c:a1:46:d3:d7:18:e4:f8:d1:b8:0c: 75:63:9f:ad:4e:88:0e:30:b9:11:3d:6d:f7:3d:25: 7b:a2:f0:eb:ff:aa:9f:a0:1c:1b:e9:a6:90:2b:12: 4b:18:06:e0:2e:63:64:c9:e2:7b:62:85:6f:72:44: 76:e4:42:29:1e:32:be:d5:81:b7:60:37:0a:cc:6a: 90:84:d8:c0:0a:6f:e6:3d:24:06:d5:f9:be:9d:ee: 64:f4:9b:d4:f0:d9:e5:40:01:fb:31:89:f9:99:df: f5:00:6b:85:88:bd:fb:09:c7:d2:8e:af:cc:7d:39: ee:13:ad:10:4f:51:8a:29:5b:70:c5:43:df:19:ff: f0:1e:56:e2:da:5f:85:0a:c1:06:65:d1:a1:0c:f5: 14:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DE:5E:B6:94:9B:D3:AD:42:BF:72:EA:C3:A3:81:6F:2A:34:71:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0320cbe9-d834-3034-9895-9940d4d9f0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:51:f2:c1:82:af:93:75:df:5d:1f:bf:f1:f2:09:a7:d8:50: b3:0b:4f:0d:b7:16:e8:02:b2:2b:1f:36:14:05:f8:53:52:4b: 67:e2:44:ee:6b:02:8c:a6:0a:40:f4:52:d5:ac:52:63:77:b0: dd:c0:ba:40:bb:06:23:07:8b:52:4c:b5:42:b0:fd:f4:55:7c: 9b:bc:64:dd:77:0e:d1:ea:57:76:87:09:99:e5:09:e3:19:75: e3:1d:c3:ed:66:ec:d2:ad:ff:c3:f2:02:40:4d:d5:ce:db:c8: 63:04:6e:48:90:16:bf:80:93:2e:55:d3:1c:90:58:30:81:75: 64:dc:d3:b8:34:37:ee:95:9a:b2:83:ff:cf:b8:43:a9:d1:b3: 4c:d1:1f:a7:fa:df:d5:c9:e2:a0:de:6f:d3:9d:11:87:fc:89: a5:fa:85:29:6e:43:a6:25:61:cc:fb:e4:b2:1e:ed:4c:e7:ee: c1:86:fc:3f:2f:a8:d7:3e:4a:24:1b:06:6e:ee:04:d6:e0:be: 5f:db:73:38:09:65:a9:7c:c5:37:92:90:a1:42:44:d7:55:0c: 0d:1b:63:3e:d2:5f:5f:47:a1:58:b9:6b:33:11:af:e4:0c:5a: 0b:fb:bf:bd:b2:d9:fc:5c:7d:73:60:8f:9e:0b:8b:db:ec:bb: 06:8c:76:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh5G6s+77ih1OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk MzQ0NWUxMjUtNjZkYy00ODViLTk4MjctOTBkOTJmMDFjOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DA532vEe9GP6O7XDTcUyz+2bGzVIcq6/Fqk 1HuSiFQF6tyGW8pz0FTZpqZGPuX6xFIVH7qgBR7FZC7pm4MP117h4VUy17TFIWMH odMIUp9xhA3e95/dpJfFknyYfOcEkbyJjgg8S3wjpYJdLKFG09cY5PjRuAx1Y5+t TogOMLkRPW33PSV7ovDr/6qfoBwb6aaQKxJLGAbgLmNkyeJ7YoVvckR25EIpHjK+ 1YG3YDcKzGqQhNjACm/mPSQG1fm+ne5k9JvU8NnlQAH7MYn5md/1AGuFiL37CcfS jq/MfTnuE60QT1GKKVtwxUPfGf/wHlbi2l+FCsEGZdGhDPUUXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG3eXraUm9OtQr9y6sOjgW8qNHF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDMyMGNiZTktZDgzNC0z MDM0LTk4OTUtOTk0MGQ0ZDlmMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1R8sGCr5N1310fv/HyCafYULMLTw23FugCsisfNhQF+FNSS2fi RO5rAoymCkD0UtWsUmN3sN3AukC7BiMHi1JMtUKw/fRVfJu8ZN13DtHqV3aHCZnl CeMZdeMdw+1m7NKt/8PyAkBN1c7byGMEbkiQFr+Aky5V0xyQWDCBdWTc07g0N+6V mrKD/8+4Q6nRs0zRH6f639XJ4qDeb9OdEYf8iaX6hSluQ6YlYcz75LIe7Uzn7sGG /D8vqNc+SiQbBm7uBNbgvl/bczgJZal8xTeSkKFCRNdVDA0bYz7SX19HoVi5azMR r+QMWgv7v72y2fxcfXNgj54Li9vsuwaMdh4= -----END CERTIFICATE-----Generated at Sun May 11 06:08:08 2025 by rpki-client